How to view items in an in-place hold Exchange 2010/Office 365

We recently migrated to Office 365/Exchange Online. It was requested that we put a couple of users in an "in-place hold" so that their mail would be retained even if it appears to them that they have deleted it.

We now have a request from management and the legal department for them to be able to view all of the items, including items the user thought they deleted. How do you do this? I found instruction on setting up the hold, and have done that with no problem, but how do you grant access to these files, and how does the user who is granted access view them? Some users are using Outlook 2007, some 2010, and others are using the browser.

To use In-Place eDiscovery, a user must be delegated the Discovery Management role group.

To access the information the user will have to navigate to the Exchange Administration center. If they do have any other Exchange administrator roles, the will only see the the interface relevant to the Discovery Management role group.

When a user deletes a message, it goes to the Deleted Items folder. When the Deleted Items folder is emptied or messages are deleted from it, or the user uses Shift-Delete to delete a message, it is moved to the Recoverable Items\Deletes folder. Contents of this folder are exposed when the user uses Recover Deleted Items in Outlook or Outlook Web App.

If the user doesn’t do anything, messages from the Deletes folder are purged when the Deleted Items Retention period configured for the mailbox database or the user expires.

If the user deletes a message from this view, few things can happen:

1 If Single Item Recovery is enabled for the mailbox, the item is moved to the Recoverable Items\Purges folder and retained until the deleted item retention period expires. This provides the administrator the capability to recover items without having to recover from backups.

2 If the mailbox is placed on Litigation Hold, the items is moved to the Recoverable Items\Purges folder and retained until the hold is removed.

3. If the mailbox is placed on an In-Place Hold, the item is moved to the Recoverable Items\DiscoveryHolds folder.

You need to run a Discovery Search, or 'In-place E-discovery' as they call it now. Once the search is completed, you can export the results directly to a .pst file, or you can copy the results to a 'Discovery Mailbox', which you can open with OWA/Outlook.

Featured Post

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Veeam Backup & Replication has added a new integration – Veeam Backup for Microsoft Office 365. In this blog, we will discuss how you can benefit from Office 365 email backup with the Veeam’s new product and try to shed some light on the needs and …

Are you unable to connect or configure Hotmail email account in Microsoft Outlook 2010, 2007? Or Outlook.com emails are not downloading to Outlook? Lets’ see the problem and resolve Outlook Connector error syncing folder hierarchy (0x8004102A).

In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center.
Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center.
Navigate to the Mail Flow…

This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory.
NOTE: For Outlook 2016 and 2013 perform the exact same steps.
Open a new email: Click the New email button in Outlook.
Start typing the address: …